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DETAILED ACTION 

Response to Amendment 

1. Applicant's amendment filed 16 July 2009 amends claims 1, 12. Applicant's amendment 
has been fully considered and entered. 

Election/Restrictions 

2. This application contains claims 1,3-11 drawn to an invention nonelected with traverse. 
A complete reply to the final rejection must include cancellation of nonelected claims or other 
appropriate action (37 CFR 1.144) See MPEP § 821.01. 

Response to Arguments 

3. Applicant argues, "Applicant is unable to provisionally elect a species as the Examiner 
has made a constructive election and therefore not afforded Applicant that option." In response, 
Examiner would like to point out that Applicant provisionally elected species 1 by original 
presentation. Identified species 1 involves an embodiment of the invention that utilizes first and 
second masks that are the same value. Identified species 2 involves a different embodiment of 
the invention that utilizes first and second masks that are not the same value. The original claims 
only included claims belonging to identified species 1 . If Applicant had filed original claims that 
included both species, Applicant would have been given the opportunity to provisionally elect 
prior to receiving action on the merits. However, because the originally presented claims only 
included claims belonging to identified species 1, Applicant constructively elected species 1 by 
original presentation. 

4. Applicant argues, "Examiner restricts originally filed claim 5 from claim 1 ...by 
definition, it is not independent... the restriction requirement is improper and Applicant 
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respectfully requests withdraw of the same." The argument is not persuasive because the 
Examiner did not restrict "originally filed claim 5 from claim 1", but instead restricted the 
embodiment of invention characterized by originally filed claim 5 from the embodiment of 
invention characterized by current claims 1,3-11. 

5. Applicant argues, "The restriction requirement is additionally improper because it lists 
two species and includes a generic claim in one of the species. A claim cannot be a genus and a 
species at the same time." In response, the Examiner did not identify any generic claims. 
Therefore, Applicant's argument is unpersuasive. 

6. Applicant argues, "The restriction requirement is also incomprehensible. Claim 5 is 
included in both species." In response, Examiner would like to reiterate that the embodiment of 
invention characterized by originally filed claim 5 is restricted from the embodiment of invention 
characterized by current claims 1,3-11. 

7. Applicant argues, "The restriction requirement. . .is improper because the Examiner 
withdrew from consideration claims 1 and 3-1 1 without consent from the Applicant." In 
response, no consent was required because Applicant received an action on the merits for the 
originally presented species. 

8. Applicant argues, "No new claims have been added. Thus, this situation does not exist 
here." This argument is not persuasive because the claim language representative of species 2 
was added by amendment (19 December 2007) following action by the Examiner (18 June 
2007). 

9. Applicant's arguments, with respect to §101 rejections of claims 12-19 have been fully 
considered and are persuasive. The §101 rejections of claims 12-19 have been withdrawn. 
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10. Applicant argues, "Rogaway does not disclose any function that could be analogized to 
the presently claimed application of an XOR function to all message blocks of a message." This 
argument is not persuasive because the algorithm depicted by Rogaway on page 5 clearly shows 
that each message block (M[i]) is XOR'd with the value Z[i]. 

1 1 . Applicant argues, "Further, Rogaway fails to disclose, or even suggest, any value that 
could be analogized to the presently claimed XOR-sum." This argument is not persuasive 
because the result of the checksum calculation could be considered an XOR-sum. Additionally, 
the computation of C can be considered an XOR-sum. 

1 2. Applicant argues, "A concatenation operation is very different from an XOR operation in 
both form and result." In response, Examiner never suggested that the concatenation was 
equivalent to the claimed XOR function, but instead was equivalent to the summation operation. 
Rogaway discloses concatenating a plurality of XOR'd values (Page 5), which is equivalent to 
the claimed XOR-sum. 

13. Applicant argues, "Rogaway also discloses applying a string L and an offset Z[m] to one 
string of a message M before a block cipher E, as well as applying the same message string 
M[m} after the block cipher E. . .applying an offset Z[m] to a checksum before a block cipher E, 
and then limiting the block cipher result to a tag length t. . .This disclosure by Rogaway clearly 
differs from the claimed invention." Applicant's arguments fail to comply with 37 CFR 1.1 1 1(b) 
because they amount to a general allegation that the claims define a patentable invention without 
specifically pointing out how the language of the claims patentably distinguishes them from the 
references. 

Claim Rejections - 35 USC §103 
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14. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

15. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness under 35 
U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness 
or nonobviousness. 

16. Claims 12-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over Rogaway, 
in view of Schneier. Referring to claims 12, 20, Rogaway discloses that each message blocks is 
concatenated (Page 5, checksum generation function), which meets the limitation of applying a 
XOR function to all message blocks of a message to compute a XOR-sum. The checksum is then 
XOR'd with Z[m] (Page 5, calculation of value 'T'), which meets the limitation of applying a 
third mask value to the XOR-sum. The result of the XOR function is then encrypted (Page 5, 
calculation of value 'T'), which meets the limitation of encrypting the masked XOR-sum using 
the block cipher and the first key. Rogaway does not disclose XOR'ing the result of the 
encryption with a value. However, it would have been obvious to one of ordinary skill in the art 
at the time the invention was made to XOR the data after the block algorithm, in addition to 
before, because this technique is not susceptible to meet-in-the-middle attack as taught by 
Schneier (Page 367). 
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Referring to claim 13, Rogaway discloses that the corresponding block of the generated 
value is generated based on the XOR of an encrypted nonce (Page 5, R) and an encrypted value 
(Page 5, L), which meets the limitation of the first/third mask value is computed by applying a 
XOR function to a first value derived from a nonce value and a second value derived from 
encrypting a third value using the block cipher and a key, wherein the second/fourth mask value 
is computed by applying a XOR function to a fourth value derived from the nonce value and a 
fifth value derived from encrypting a sixth value using the block cipher and a key. Rogaway does 
not specify that the key used to encrypt the value to generate the 'L' (Page 5) is different than the 
key used to encrypt M[i] Z[i] (Page 5). However, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to use multiple keys in the encryption 
algorithm in order to enhance the strength of the encryption algorithm by making the algorithm 
more difficult to break. Using only a single encryption key is easier break than using multiple 
because an attacker would only need to discover the one key as opposed to having to discover 
every key that is used in the encryption algorithm. Rogaway also does not disclose applying a 
substitution function to the result of the XOR function on L and R. However, it would have been 
obvious to one of ordinary skill in the art at the time the invention was made to perform a 
substitution function on the result of the XOR function on L and R because substitution 
operations are an important part of block cipher algorithms that give them security as taught by 
Schneier (Page 275). 

Referring to claim 14, Rogaway discloses that to compute the R value, the nonce is 
XOR'd with L and the result of the XOR function is encrypted with key K (Page 5), which meets 
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the limitation of the first and fourth values derived from the nonce value are permutations of a 
binary value computed by encrypting the nonce value using the block cipher and the first key. 

Referring to claims 15, 16, Rogaway discloses encrypting a message by exclusive or'ing 
a block of the message with a corresponding block of a generated value (Page 5, M[i] © Z[i]), 
which meets the limitation of whitening at least one message block with a third mask value. The 
result of that exclusive or operation is encrypted (Page 5) using a block cipher (Page 4), which 
meets the limitation of encrypting the at least one whitened message block using a block cipher 
and a first key. The result of the encryption is the exclusive or'ed with a corresponding block of 
the generated value (Page 5), which meets the limitation of whitening the at least one encrypted 
message block with the third mask value to generate at least one corresponding output ciphertext 
block. 

Referring to claim 17, Rogaway discloses that the corresponding block of the generated 
value is generated based on the XOR of an encrypted nonce (Page 5, R) and an encrypted value 
(Page 5, L), which meets the limitation of the first and second mask values are computed by 
applying a XOR function to a first value derived from a nonce value and a second value derived 
from encrypting a third value using the block cipher and a key. Rogaway does not specify that 
the key used to encrypt the value to generate the 'L' (Page 5) is different than the key used to 
encrypt M[i] (t? Z[i] (Page 5). However, it would have been obvious to one of ordinary skill in 
the art at the time the invention was made to use multiple keys in the encryption algorithm in 
order to enhance the strength of the encryption algorithm by making the algorithm more difficult 
to break. Using only a single encryption key is easier break than using multiple because an 
attacker would only need to discover the one key as opposed to having to discover every key that 
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is used in the encryption algorithm. Rogaway also does not disclose applying a substitution 
function to the result of the XOR function on L and R. However, it would have been obvious to 
one of ordinary skill in the art at the time the invention was made to perform a substitution 
function on the result of the XOR function on L and R because substitution operations are an 
important part of block cipher algorithms that give them security as taught by Schneier (Page 
275). 

Referring to claim 18, Rogaway discloses that the block cipher used is the AES block 
cipher (Page 6, first paragraph), which meets the limitation of the block cipher is AES. 

Referring to claim 19, Rogaway discloses that the L and R values are elements of the 
offset vector Z (page 5), which meets the limitation of the second and fifth values are elements of 
a vector. 

Conclusion 

17. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 
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18. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BENJAMIN E. LANIER whose telephone number is (571)272- 
3805. The examiner can normally be reached on M-Th 7:00am-5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Benjamin E Lanier/ 

Primary Examiner, Art Unit 2432 



